CIS Microsoft Windows Server Benchmarks

Home • Resources • Benchmarks • CIS Microsoft Windows Server Benchmarks

An objective, consensus-driven security guideline for the Microsoft Windows Server Operating Systems.

A step-by-step checklist to secure Microsoft Windows Server:

For Microsoft Windows Server 2016 RTM (1607) (CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark version 1.0.0)

CIS has worked with the community since 2009 to publish a benchmark for Microsoft Windows Server

Other CIS Benchmark versions:

For Microsoft Windows Server 2016 RTM (1607) (CIS Microsoft Windows Server 2008 R2 Benchmark version 3.1.0)

Want to skip most manual steps?

Buy Per Server Hour

Provision on AWS Marketplace, AWS GovCloud, AWS Intelligence Community, Google Cloud Platform and Microsoft Azure

Only Available to CIS SecureSuite Members

CIS-CAT Pro is included with membership and can automatically test for compliance and remediate with this benchmark.

See the full list

Ticket • 14 Jun 2018

Policies\Microsoft\WindowsStore:AutoDownload should be 2 (Disabled)

Discussion • 14 Jun 2018

Server 2016: 1.1.2 (L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0' (Scored)

Discussion • 11 Jun 2018

Impact of 18.3.5 (L1) "Potentially Unwanted Programs" and downloading files

Discussion • 10 Jun 2018

Rolling Windows 10 releases and the CIS benchmarks

Center for Internet Security®